用于将特定AD OU的用户添加到另一个AD组的脚本

Question

以管理员身份运行Powershell

我希望有一个脚本，我可以每天运行，将用户从“cn = users，dc = costco，dc = com”添加到AD组“groupname”“CN = groupname，OU = Groups，DC = costco，DC = COM”

$When = (Get-Date).AddDays(-1).Date
Get-ADUser -SearchBase 'cn=users,dc=costco,dc=com' -Filter { whenCreated -ge $When } | add-adgroupmember -MemberOf 'groupname'

它出错了

Add-ADGroupMember：找不到与参数名称'MemberOf'匹配的参数。 在行：2 char：111 + ... ilter {whenCreated -ge $ When} | add-adgroupmember -MemberOf'groupname ... + ~~~~~~~~~ + CategoryInfo：InvalidArgument :( :) [Add-ADGroupMember]，ParameterBindingException + FullyQualifiedErrorId：NamedParameterNotFound，Microsoft.ActiveDirectory.Management.Commands.AddADGroupMember

我也在redditor的帮助下尝试过

When = (Get-Date).AddDays(-1).Date
Get-ADUser -SearchBase 'CN=users,dc=costo,dc=com' -Filter { whenCreated -ge $When } | ForEach-Object { Add-ADGroupMember -Identity 'Groupname' -Members $_ }

错误：

Add-ADGroupMember：访问权限不足以执行操作在行：2 char：109 + ... ach-Object {Add-ADGroupMember -Identity'groupname'-Member $ _} ... + ~~~~~~~ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo ：NotSpecified :( groupname：ADGroup）[Add-ADGroupMember]，ADException + FullyQualifiedErrorId：ActiveDirectoryServer：8344，Microsoft.ActiveDirectory.Management.Commands.AddADGroupMember

Answer 1

要使第一个示例正常工作，您需要为命令提供管道值，而不是尝试将其传递给实际管道。

尝试：

$group = "NewUsers"    
Get-ADUser -SearchBase 'cn=users,dc=costco,dc=com' -Filter { whenCreated -ge $When } | %{ Add-ADGroupMember -Identity $Group -Members $_.samaccountname }